$ rpki-client -vvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft File: HjKemPZ2kum1dgI6L7xVfVfdVWw.mft (raw, json) Hash identifier: RKnIwJxsF85XDv/wwZ2xcm7esq3P26loQg8UwmkEs04= Subject key identifier: C0:A5:E8:E3:E4:D5:0D:B0:E8:22:3A:78:05:20:DD:3A:B6:57:25:0E Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C Certificate issuer: /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Certificate serial: 0D86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft Manifest number: 0D60 Signing time: Sat 26 Apr 2025 17:52:28 +0000 Manifest this update: Sat 26 Apr 2025 17:52:28 +0000 Manifest next update: Sat 03 May 2025 17:52:28 +0000 Files and hashes: 1: HjKemPZ2kum1dgI6L7xVfVfdVWw.crl (hash: hJCSrpBYXxT8YKQ4iHeomIFPfwXYScjw82ad7/Z2FgQ=) 2: FD120CC2D94411EDA95E3613C4F9AE02.roa (hash: 7Q1sj7h/kM6xF990j8/QO8w1Qkfx36SwQEh39xIk1I4=) 3: 79B042BAF3BD11EE961D7A7AC4F9AE02.roa (hash: QFGP47I0YdoniF040iEHzt2spsQy+KQ0P183ANxKYBw=) 4: 4EF1DE0E822A11EDB2081A49C4F9AE02.roa (hash: nKPGiKm/0x5gSVPdolM9Kvr6Qyb+vWukLGBNYOdi6hU=) 5: 8F7DDD8889B811EE9E7ABE26C4F9AE02.roa (hash: 5Sbcqk2T+f7133+xiA46KTuH8zKP6892tENeVV/50JM=) 6: 50063EE8822A11EDB2081A49C4F9AE02.roa (hash: 4WLEo+7utrf3YQ5HW1B5C1Kpj6dVRKES3SiFL4z/3Rk=) 7: 87BB6D70822711ED94C3212CC4F9AE02.roa (hash: fwAHRlN4Uw1i6q04q/JVTmB/uglpgox90dvfugvMuyA=) 8: F2826A504FCF11EB88444467C4F9AE02.roa (hash: fD4ExFVU3zuArt3Xhftg8Dy8YqVccg0NtHG1ZHrBEJ4=) 9: D0551B50046411F09760073DC4F9AE02.roa (hash: el3Plc+WJmYSPNAmnJ6k/gtdNZJt+5aUgVhJBKFg6BE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 17:52:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3462 (0xd86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568F6, serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Validity Not Before: Apr 26 17:52:28 2025 GMT Not After : May 3 17:52:28 2025 GMT Subject: CN=680d1d5c-0ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d6:bf:97:c8:fb:8d:1c:95:6c:65:71:8e:93: b6:71:65:ce:ce:71:7e:50:26:05:72:1a:74:30:70: b2:e2:d1:23:23:0e:06:e5:66:53:f9:c3:9d:55:db: 86:02:63:07:d6:03:f2:f8:ee:e6:df:71:62:b4:79: f5:40:e0:2d:2d:0e:95:43:80:67:9e:46:0c:0d:22: ce:e1:a9:ec:25:66:80:6e:58:ad:23:53:a8:36:bd: 31:e6:a3:41:09:c3:2d:88:82:5b:85:cc:c2:cb:3b: 9d:63:72:8d:75:21:24:4f:0f:c3:e5:73:1e:58:7c: d1:fc:1f:7b:8f:42:14:b1:44:e3:c6:1a:1f:bd:de: 58:f9:63:dc:ca:d9:bd:ad:f1:b2:df:17:63:3b:fe: 2f:59:55:df:30:f1:1b:d8:e7:35:d6:7c:88:21:e7: bf:c8:09:ce:83:ab:1d:cb:f5:a6:e2:02:57:2a:30: 40:ce:23:73:b6:81:f4:8d:ad:21:28:6c:a0:d5:f0: e9:91:e9:6a:79:c9:7e:fc:4e:fc:a1:2f:34:4e:a0: 44:ad:46:f1:96:31:9e:35:73:0a:ca:2e:81:82:a4: 61:ec:7c:fe:51:0c:d3:4e:13:ad:72:62:02:6e:20: 5b:a2:17:84:66:93:2d:7b:be:60:4c:27:7d:0c:6b: ca:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A5:E8:E3:E4:D5:0D:B0:E8:22:3A:78:05:20:DD:3A:B6:57:25:0E X509v3 Authority Key Identifier: keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:58:5f:5b:a3:80:35:99:43:91:97:e9:d2:64:50:a9:46:60: b5:ac:e3:69:9a:8c:0e:cf:b7:d6:89:ad:d0:ea:7a:a0:0a:d2: b2:18:dc:c8:fd:14:03:c6:af:ee:48:58:8c:b8:0f:49:51:4b: 52:3c:78:28:d9:a4:7a:ea:f8:6c:27:04:dc:e6:d5:2c:32:b5: ef:01:bb:e0:38:22:db:37:75:ab:43:76:53:b2:47:12:74:b9: 94:e3:c6:e6:9c:44:24:8a:f9:9d:12:cf:9b:7f:26:38:49:ce: 30:f3:25:00:1b:84:58:bf:a9:33:cc:93:cc:c8:54:c6:f5:eb: 4e:cb:63:69:6b:8c:ee:1d:28:a7:bc:2b:a5:4d:12:80:f3:6e: 54:80:03:64:e5:8c:d4:58:b3:1d:8a:0c:b6:94:49:fc:e4:94: 38:a3:71:36:33:db:2d:ee:50:b8:18:70:b4:9d:83:8b:7a:74: 6a:b2:67:25:54:19:c3:7b:9f:80:0e:8c:ef:92:0a:3d:0e:5f: 59:48:91:f7:70:d9:df:f8:08:0b:81:fa:fa:df:07:80:09:cf: bd:55:6e:1d:bb:11:9b:b8:22:f7:95:6b:89:b4:e2:4b:a3:8e: 5c:4d:2c:11:32:af:14:42:47:23:1e:fc:89:96:b4:fb:1e:35: 56:30:c0:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY4RjYxMTAvBgNVBAUTKDFFMzI5RTk4RjY3NjkyRTlCNTc2MDIzQTJGQkM1NTdE NTdERDU1NkMwHhcNMjUwNDI2MTc1MjI4WhcNMjUwNTAzMTc1MjI4WjAYMRYwFAYD VQQDEw02ODBkMWQ1Yy0wYWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsta/l8j7jRyVbGVxjpO2cWXOznF+UCYFchp0MHCy4tEjIw4G5WZT+cOdVduG AmMH1gPy+O7m33FitHn1QOAtLQ6VQ4BnnkYMDSLO4ansJWaAblitI1OoNr0x5qNB CcMtiIJbhczCyzudY3KNdSEkTw/D5XMeWHzR/B97j0IUsUTjxhofvd5Y+WPcytm9 rfGy3xdjO/4vWVXfMPEb2Oc11nyIIee/yAnOg6sdy/Wm4gJXKjBAziNztoH0ja0h KGyg1fDpkelqecl+/E78oS80TqBErUbxljGeNXMKyi6BgqRh7Hz+UQzTThOtcmIC biBboheEZpMte75gTCd9DGvKGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCl6OPk 1Q2w6CI6eAUg3Tq2VyUOMB8GA1UdIwQYMBaAFB4ynpj2dpLptXYCOi+8VX1X3VVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjhGNi8zN0QwM0RGNkNF MjgxMUU5QTZCNkMxN0JDNEY5QUUwMi9IaktlbVBaMmt1bTFkZ0k2TDd4VmZWZmRW V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hqS2VtUFoya3VtMWRnSTZMN3hWZlZmZFZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjhGNi8zN0QwM0RGNkNFMjgxMUU5QTZCNkMxN0JDNEY5QUUwMi9IaktlbVBaMmt1 bTFkZ0k2TDd4VmZWZmRWV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQWF9bo4A1mUORl+nSZFCpRmC1rONpmowOz7fWia3Q6nqgCtKyGNzI /RQDxq/uSFiMuA9JUUtSPHgo2aR66vhsJwTc5tUsMrXvAbvgOCLbN3WrQ3ZTskcS dLmU48bmnEQkivmdEs+bfyY4Sc4w8yUAG4RYv6kzzJPMyFTG9etOy2Npa4zuHSin vCulTRKA825UgANk5YzUWLMdigy2lEn85JQ4o3E2M9st7lC4GHC0nYOLenRqsmcl VBnDe5+ADozvkgo9Dl9ZSJH3cNnf+AgLgfr63weACc+9VW4duxGbuCL3lWuJtOJL o45cTSwRMq8UQkcjHvyJlrT7HjVWMMBf -----END CERTIFICATE-----Generated at Sat Apr 26 21:01:53 2025 by rpki-client on console.sobornost.net